
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier: vWTuk8dmgSu+zVd3fhySihyDKX1KE7XIr5RoRuh+jtE=
Subject key identifier: 65:47:0B:B9:2C:90:6F:76:D2:42:1C:88:74:30:BD:F5:67:E0:E4:8C
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 01976A3CE679E2E7B3CDB06DCFFA87EB15EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number: 0EEB
Signing time: Fri 13 Jun 2025 17:01:05 +0000
Manifest this update: Fri 13 Jun 2025 17:01:05 +0000
Manifest next update: Sat 14 Jun 2025 17:01:05 +0000
Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: M5hNvE/D9ITV3bwSwdgC8BhHPU8fgkNN9DWkFjb9HWw=)
2: NO2hwXxk6AiYVNho9DdnmakKibo.roa (hash: KjRA6xm9G+dFvFvEr1pRfwpBhmr4/09q+ZWaH5ApdDY=)
3: On6R4nNTZ0YYv_0GBGytm6COqe8.roa (hash: bNbiiOOyNE6FHV7YY8Nd3d02QHZTqUZthKpv3jqVHn4=)
4: _UiUxv0oU2Vs8vl9aQlqGT-rguM.roa (hash: EibngS/6U5WbywdZke7WcdMlnrfByt82mvGn2UMi818=)
5: qnHwx7ZjqkHGMQ3UL_6iH_ZiPZ0.roa (hash: v6x8FXcAuZgdOrpOuZAffsHlmhE2j1MwJFDVe05keHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:e6:79:e2:e7:b3:cd:b0:6d:cf:fa:87:eb:15:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Jun 13 17:01:05 2025 GMT
Not After : Jun 14 17:01:05 2025 GMT
Subject: CN=65470bb92c906f76d2421c887430bdf567e0e48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f7:a8:c3:cc:27:96:69:42:f6:82:0b:38:65:
b6:ae:0c:d1:eb:81:83:08:7b:57:b0:ed:fd:1c:50:
d9:61:9d:ed:f0:62:fb:42:c0:06:8c:c0:a2:bb:1c:
f1:e2:b1:fa:4d:ba:eb:27:45:a5:b8:53:0b:4d:f7:
0a:28:e6:72:55:be:b3:9c:14:8c:85:a4:36:f1:77:
74:d6:6e:e5:24:7a:36:18:b9:7a:e8:35:46:4a:94:
63:9a:c2:03:fb:9d:4e:ce:4a:fa:4d:d9:c8:1c:b0:
c6:59:db:62:4c:d9:c3:24:92:a6:52:31:1c:32:df:
bc:2f:bb:23:d1:76:29:a1:bf:0b:76:8f:1d:b7:f4:
0f:7b:52:84:b4:66:af:de:c2:f7:08:75:69:f6:72:
6c:85:8d:4a:37:8d:4e:04:15:bc:e4:a1:d8:dc:dd:
5e:86:1f:ef:83:63:40:b6:d9:51:5f:75:eb:76:c3:
9f:47:93:1c:40:36:48:86:1d:bf:56:cb:1b:7c:c5:
1a:14:f8:59:6c:36:11:8b:f0:fc:cb:6a:f4:86:a6:
e6:ee:2b:4e:b3:de:e8:6d:83:72:40:c1:70:d0:33:
93:fd:37:d4:30:11:66:87:7a:d6:ed:a9:89:3c:94:
16:a6:5d:73:0f:8a:0c:02:b6:76:10:83:c0:80:d2:
7e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:47:0B:B9:2C:90:6F:76:D2:42:1C:88:74:30:BD:F5:67:E0:E4:8C
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ea:20:ff:f3:83:bb:52:d6:d7:fc:c4:ff:31:c4:82:c9:38:e9:
15:87:dd:99:ba:08:f5:59:f1:d1:30:08:0b:bd:74:cb:df:ce:
ea:6e:f2:f3:bb:cd:3b:59:57:99:bb:51:c0:11:e5:7a:82:88:
9a:55:0d:17:4b:78:a6:56:63:8e:a2:ec:43:1c:37:0a:2b:55:
34:c3:1c:f1:57:da:c5:ae:35:4b:dd:f4:35:d2:97:d0:80:da:
c5:f5:34:82:83:c9:c2:e6:1f:c2:1e:62:72:87:22:ec:c6:fd:
0c:d9:ab:f6:6d:69:8c:45:cc:5f:ac:01:b9:84:55:71:1f:c5:
a5:50:ce:10:cf:fb:22:22:ea:3d:98:cc:56:12:af:fc:2b:c7:
e2:26:97:2a:68:4c:9e:5f:27:ac:43:90:fd:36:1d:b6:ac:61:
9b:89:90:ab:75:4a:48:25:6f:bd:70:47:cd:09:4d:da:7c:ca:
f6:b8:29:bb:19:4a:dc:82:05:9b:fd:01:3c:8d:60:42:d6:14:
2e:d1:18:74:9b:5c:d5:3b:e6:96:4c:4f:39:a5:ff:39:9b:31:
d3:c0:e5:9b:6f:a3:0c:32:cc:a2:4b:53:ca:7d:24:a2:cb:9f:
0b:91:e4:c8:a4:ae:43:d6:4e:dd:e5:0b:32:35:d7:a3:62:81:
21:32:35:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 21:25:52 2025 by rpki-client